| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-09-20 16:32 UTC | bpf: clear stale IPv4 options after LWT encapsulation | 3 | bestswngs@gmail.com | - |
| 2026-09-20 13:23 UTC | bpf: reject dev-bound-only programs on other devices | 2 | bestswngs@gmail.com | - |
| 2026-09-19 11:00 UTC | bpf: reject dev-bound-only programs on other devices | 2 | bestswngs@gmail.com | - |
| 2026-09-18 23:40 UTC | ALSA: line6: reject oversized playback packets | 1 | xmei5@asu.edu | - |
| 2026-09-18 22:57 UTC | ALSA: ua101: reject mismatched capture/playback packet sizes | 1 | xmei5@asu.edu | - |
| 2026-09-18 21:22 UTC | ALSA: line6: Clamp the playback URB size to the OUT endpoint packet size | 1 | xmei5@asu.edu | - |
| 2026-09-18 14:57 UTC | rxrpc: rxgk: Initialize challenge control message | 1 | bestswngs@gmail.com | - |
| 2026-09-17 16:13 UTC | bpf: reject dev-bound-only programs on other devices | 1 | bestswngs@gmail.com | finished in 4h57m0s |
| 2026-09-17 15:39 UTC | veth: manage XDP program pointers during channel resize | 1 | bestswngs@gmail.com | finished in 4h9m0s |
| 2026-09-16 17:29 UTC | bpf: reject dev-bound programs on unregistering devices | 1 | bestswngs@gmail.com | finished in 4h20m0s |
| 2026-09-16 17:04 UTC | bpf: clear stale IPv4 options after LWT encapsulation | 2 | bestswngs@gmail.com | finished in 4h20m0s |
| 2026-09-16 04:11 UTC | bpf: lwt: clear stale IP control block after pushing an encap header | 1 | xmei5@asu.edu | finished in 5h10m0s |
| 2026-09-16 03:45 UTC | media: go7007: only set audio_enabled if go7007_snd_init() succeeded | 1 | xmei5@asu.edu | finished in 4h38m0s |
| 2026-09-15 21:40 UTC | ceph: fix integer overflow in the snap trace bounds check | 1 | xmei5@asu.edu | finished in 2h5m0s |
| 2026-09-15 17:01 UTC | bpf: clear stale IPv4 options after LWT encapsulation | 1 | bestswngs@gmail.com | finished in 4h44m0s |
| 2026-09-15 08:31 UTC | vlan: require the MAC header to be present in __vlan_insert_inner_tag() | 1 | xmei5@asu.edu | finished in 4h21m0s |
| 2026-09-15 08:24 UTC | net: bcmgenet: restore the hardware filters on open | 1 | xmei5@asu.edu | skipped |
| 2026-09-15 05:19 UTC | ceph: reject mdsmaps that claim more than CEPH_MAX_MDS ranks | 1 | xmei5@asu.edu | finished in 2h55m0s |
| 2026-09-15 02:17 UTC | ceph: require the dentry lease record to cover struct ceph_mds_reply_lease | 1 | xmei5@asu.edu | finished in 4h7m0s |
| 2026-09-15 01:42 UTC | libceph: bound mon_command ack decode to front len | 1 | xmei5@asu.edu | finished in 2h36m0s |
| 2026-09-14 17:02 UTC | bpf: Skip unsettled links in link iterator | 1 | bestswngs@gmail.com | finished in 4h31m0s |
| 2026-09-14 06:51 UTC | net/sched: reject IDR error pointers when deleting actions | 1 | bestswngs@gmail.com | finished in 3h44m0s |
| 2026-09-13 11:45 UTC | xfs: validate buffer log item before reordering | 1 | bestswngs@gmail.com | finished in 4h2m0s |
| 2026-09-13 00:29 UTC | media: em28xx: reject audio endpoint with zero packet size | 1 | xmei5@asu.edu | finished in 4h37m0s |
| 2026-09-12 21:15 UTC | fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use | 1 | xmei5@asu.edu | finished in 4h42m0s |
| 2026-09-12 20:05 UTC | ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity | 1 | xmei5@asu.edu | finished in 4h13m0s |
| 2026-09-12 17:10 UTC | nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() | 1 | bestswngs@gmail.com | finished in 4h51m0s |
| 2026-09-12 08:39 UTC | usbip: stub: keep URB array state consistent on errors | 1 | bestswngs@gmail.com | finished in 3h13m0s |
| 2026-09-12 00:08 UTC | ksmbd: fix overflow in dacloffset bounds check in build_sec_desc() | 1 | gkobakhi@asu.edu | finished in 58m0s |
| 2026-09-11 21:52 UTC | vxlan: report whether vxlan_fdb_update() created the remote | 2 | alishmery18@gmail.com | finished in 4h29m0s |
| 2026-09-11 14:03 UTC | bpf: Fix NULL pointer dereference in __bpf_sk_storage_map_seq_show | 2 | cenzhang@linux.microsoft.com | finished in 3h43m0s |
| 2026-09-10 23:51 UTC | fuse: don't BUG when the copy buffer is exhausted | 8 | xmei5@asu.edu | finished in 4h6m0s |
| 2026-09-10 14:25 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 3 | cenzhang@linux.microsoft.com | finished in 3h50m0s |
| 2026-09-10 13:50 UTC | can: kvaser_usb: validate command format before parsing in hydra receive path | 4 | cenzhang@linux.microsoft.com | finished in 2h22m0s |
| 2026-09-10 11:26 UTC | bpf,tcp: Fix bpf_sock_destroy() on TIME_WAIT and listener socks | 3 | jiayuan.chen@linux.dev | finished in 3h44m0s |
| 2026-09-10 02:24 UTC | fuse: don't BUG when the copy buffer is exhausted | 7 | xmei5@asu.edu | finished in 4h45m0s |
| 2026-09-09 13:53 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 2 | cenzhang@linux.microsoft.com | finished in 4h9m0s |
| 2026-09-09 04:08 UTC | bpf: disallow bpf_skb_pull_data() for LWT_SEG6LOCAL | 2 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-09-08 19:57 UTC | gpib: agilent_82357a: fix null-ptr-deref in primary_address | 1 | gkobakhi@asu.edu | finished in 4h10m0s |
| 2026-09-08 16:50 UTC | net: dsa: tag_brcm: legacy FCS: request needed tailroom | 1 | bestswngs@gmail.com | skipped |
| 2026-09-07 19:21 UTC | bpf: refresh seg6local SRH pointer after skb pull | 1 | bestswngs@gmail.com | finished in 4h38m0s |
| 2026-09-07 07:31 UTC | net: usb: net1080: fix out-of-bounds access in rx_fixup() | 1 | elb12345@hotmail.co.uk | finished in 2h31m0s |
| 2026-09-06 15:43 UTC | Bluetooth: coredump: Quiesce dump work on unregister | 3 | bestswngs@gmail.com | finished in 3h45m0s |
| 2026-09-06 08:44 UTC | netfilter: ip6t_rpfilter: reject routes without inet6_dev | 2 | bestswngs@gmail.com | finished in 4h24m0s |
| 2026-09-06 07:54 UTC | netfilter: ip6t_rpfilter: reject routes without inet6_dev | 2 | bestswngs@gmail.com | finished in 4h34m0s |
| 2026-09-06 07:41 UTC | bpf,tcp: Fix bpf_sock_destroy() on TIME_WAIT and listener socks | 2 | jiayuan.chen@linux.dev | finished in 4h35m0s |
| 2026-09-06 03:49 UTC | netfilter: ip6t_rpfilter: handle routes without inet6_dev | 1 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-09-06 03:04 UTC | net/tcp-ao: don't dereference NULL current_key/rnext_key | 2 | xmei5@asu.edu | finished in 4h34m0s |
| 2026-09-04 09:49 UTC | bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() | 2 | jiayuan.chen@linux.dev | finished in 4h10m0s |
| 2026-09-04 02:17 UTC | vxlan: vnifilter: roll back VNI insertion when the group update fails | 1 | alishmery18@gmail.com | finished in 4h29m0s |
| 2026-09-04 00:58 UTC | net/tcp-ao: transfer tcp_ao_info to the TIME_WAIT socket | 1 | xmei5@asu.edu | finished in 4h48m0s |
| 2026-09-03 12:52 UTC | bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() | 1 | jiayuan.chen@linux.dev | finished in 4h20m0s |
| 2026-09-02 15:52 UTC | net/sched: defer qdisc freeing after failed creation | 2 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-09-02 09:26 UTC | wifi: mac80211: preserve RCU links during batch key removal | 1 | bestswngs@gmail.com | finished in 4h43m0s |
| 2026-09-01 18:31 UTC | bpf: Fix non-linear SRH access in bpf_update_srh_state() | 1 | cenzhang@linux.microsoft.com | finished in 4h21m0s |
| 2026-09-01 18:06 UTC | ufs: validate cylinder group free bitmap offset | 1 | cenzhang@linux.microsoft.com | finished in 1h37m0s |
| 2026-08-31 19:15 UTC | wifi: ar5523: reject negative reply lengths | 1 | bestswngs@gmail.com | finished in 2h45m0s |
| 2026-08-27 23:55 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 3 | blbllhy@gmail.com | finished in 3h52m0s |
| 2026-08-27 11:13 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 17 | tung.quang.nguyen@est.tech | finished in 4h15m0s |
| 2026-08-27 05:18 UTC | bpf: Fix NULL pointer dereference in __bpf_sk_storage_map_seq_show | 1 | blbllhy@gmail.com | finished in 3h55m0s |
| 2026-08-26 20:17 UTC | xfrm: hold net_device reference under RCU in bundle creation | 2 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-26 17:13 UTC | tcp: fix use-after-free in do_tcp_getsockopt() | 2 | blbllhy@gmail.com |
finished
in 1h6m0s
[1 findings] |
| 2026-08-26 12:02 UTC | pull-request: can 2026-08-26 | 1 | mkl@pengutronix.de | finished in 3h53m0s |
| 2026-08-25 20:02 UTC | netfilter: ipset: add synchronize_rcu() in destroy to close use-after-free race | 2 | blbllhy@gmail.com | finished in 4h5m0s |
| 2026-08-25 05:24 UTC | gtp: fix sk_created race conditions | 2 | blbllhy@gmail.com | finished in 3h42m0s |
| 2026-08-23 17:28 UTC | sctp: fix NULL deref on untransmitted RECONF completion | 3 | bestswngs@gmail.com | finished in 4h28m0s |
| 2026-08-22 17:23 UTC | sctp: fix NULL deref on untransmitted RECONF completion | 2 | bestswngs@gmail.com | finished in 4h1m0s |
| 2026-08-22 09:10 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 16 | tung.quang.nguyen@est.tech | finished in 4h31m0s |
| 2026-08-22 04:54 UTC | amt: fix tunnel list corruption on device stop | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-21 18:24 UTC | tcp: fix congestion control UAFs in do_tcp_getsockopt() | 1 | blbllhy@gmail.com | finished in 3h46m0s |
| 2026-08-20 20:02 UTC | xfrm: hold net_device reference under RCU in bundle creation | 1 | blbllhy@gmail.com | finished in 4h1m0s |
| 2026-08-20 19:52 UTC | net: qualcomm: rmnet: restore skb->dev on deaggregated frames | 2 | xmei5@asu.edu | finished in 1h27m0s |
| 2026-08-20 16:22 UTC | sctp: fix NULL deref on untransmitted RECONF completion | 1 | bestswngs@gmail.com | finished in 4h26m0s |
| 2026-08-20 08:11 UTC | net: qualcomm: rmnet: set skb->dev for deaggregated MAP commands | 1 | xmei5@asu.edu | finished in 1h9m0s |
| 2026-08-20 02:07 UTC | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 2 | blbllhy@gmail.com | finished in 4h25m0s |
| 2026-08-20 01:06 UTC | netfilter: ipset: list:set: defer ip_set_put_byindex to RCU callback | 1 | blbllhy@gmail.com | finished in 4h27m0s |
| 2026-08-19 16:59 UTC | net: bonding: fix use-after-free in bond_xmit_broadcast() | 1 | artem@trailofbits.com | skipped |
| 2026-08-19 06:19 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 15 | tung.quang.nguyen@est.tech | finished in 4h24m0s |
| 2026-08-19 01:48 UTC | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 1 | blbllhy@gmail.com | finished in 4h20m0s |
| 2026-08-18 16:48 UTC | amt: do not store tunnel pointer in skb control block | 1 | blbllhy@gmail.com | finished in 4h32m0s |
| 2026-08-18 15:45 UTC | xdp: fix zero-copy frame layout | 1 | bestswngs@gmail.com | finished in 4h31m0s |
| 2026-08-17 13:26 UTC | ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() | 3 | andrea.mayer@uniroma2.it | finished in 4h42m0s |
| 2026-08-17 06:09 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 14 | tung.quang.nguyen@est.tech | finished in 4h36m0s |
| 2026-08-17 01:32 UTC | ipv6: avoid divide by zero in rt6_multipath_rebalance | 1 | blbllhy@gmail.com | finished in 3h57m0s |
| 2026-08-16 03:52 UTC | gtp: fix NULL pointer dereference in gtp0_handle_echo_resp() | 1 | blbllhy@gmail.com | finished in 4h23m0s |
| 2026-08-14 09:13 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 13 | tung.quang.nguyen@est.tech | finished in 4h5m0s |
| 2026-08-12 21:53 UTC | vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes | 1 | xmei5@asu.edu | finished in 4h43m0s |
| 2026-08-12 02:55 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 12 | tung.quang.nguyen@est.tech | finished in 4h32m0s |
| 2026-08-05 16:13 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 11 | tung.quang.nguyen@est.tech | finished in 4h7m0s |
| 2026-08-04 02:16 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 10 | tung.quang.nguyen@est.tech | finished in 16m0s |
| 2026-08-02 13:01 UTC | macvlan: require lower-netns admin for shared port settings | 2 | doruk@0sec.ai | finished in 4h46m0s |
| 2026-08-01 12:10 UTC | netfilter: ipset: serialize kernel-side put-byindex with swap | 1 | zhilinz@nebusec.ai | finished in 4h17m0s |
| 2026-07-30 08:34 UTC | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | 9 | tung.quang.nguyen@est.tech | finished in 4h50m0s |
| 2026-07-29 20:06 UTC | macvlan: require init-userns CAP_NET_ADMIN to raise bc_queue_len | 2 | xmei5@asu.edu | finished in 4h17m0s |
| 2026-07-29 19:16 UTC | vsock/virtio: fix worker access after virtqueue teardown | 3 | bestswngs@gmail.com | finished in 3h56m0s |
| 2026-07-28 21:54 UTC | seg6: check lwtunnel state after nf hooks in seg6local | 2 | xmei5@asu.edu | finished in 4h35m0s |
| 2026-07-27 03:58 UTC | vsock/virtio: prevent workers from using deleted virtqueues | 1 | bestswngs@gmail.com | finished in 5h17m0s |
| 2026-07-26 12:54 UTC | macvlan: require lower-netns admin for shared port settings | 1 | doruk@0sec.ai | finished in 5h50m0s |
| 2026-07-26 12:03 UTC | net: flow_offload: serialize driver callback lists | 2 | bestswngs@gmail.com | finished in 5h21m0s |
| 2026-07-25 23:39 UTC | bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor | 2 | xmei5@asu.edu | finished in 6h40m0s |